Fake job postings by Graphalgo are using remote access trojans to attack crypto developers.

This article is machine translated
Show original

According to Techub News, the ReversingLabs research team has discovered a new branch of a fake job posting campaign launched by the North Korean hacking group Lazarus Group, graphalgo, which is using a remote access trojan to attack cryptocurrency developers. Its name comes from the first package released by the campaign in the npm repository. The campaign, which has been active since early May 2025, aims to attack JavaScript and Python developers by offering fake cryptocurrency-related job postings.

Source
Disclaimer: The content above is only the author's opinion which does not represent any position of Followin, and is not intended as, and shall not be understood or construed as, investment advice from Followin.
Like
Add to Favorites
Comments